$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa File: 2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa (raw, json) Hash identifier: REUE+qiHEmMu67haX2soz462aRtUSQVNurnx7uFAn7E= Subject key identifier: 30:06:95:16:2A:C0:BC:B0:50:60:AA:E4:12:CA:A7:F7:A6:1B:DD:13 Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Certificate serial: 010D0C9F4328584B2CF6DCB85AFB7C5450E64F40 Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 394840 IP address blocks: 2607:bd80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:dc:b8:5a:fb:7c:54:50:e6:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=3a1a1f5a-9e7a-4810-9c23-3e1031c9520f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:e9:b2:3e:90:f8:d0:24:d1:91:b9:3f:4e: 22:15:2a:a2:ca:15:95:d5:d7:56:8d:c9:7a:ff:5d: a0:7f:da:77:d1:e1:f1:a7:16:cd:50:b7:c2:09:e1: 4e:99:89:0b:07:ae:5d:e1:97:78:18:6f:35:ad:03: 0e:ae:bb:03:e7:55:c9:27:8d:50:33:88:4e:70:b1: 7e:90:54:2c:a2:3c:52:54:65:78:3d:a2:00:1a:75: f4:eb:e4:87:2c:4a:d6:1f:f6:08:08:d5:9f:5a:6e: 07:15:89:25:3e:60:b4:59:8b:6d:1f:35:9a:3d:66: e2:b8:7b:99:0f:7f:27:d0:64:5d:5a:10:c2:e5:64: 48:57:83:bd:dc:df:5a:9f:a4:4b:14:38:a0:c6:b9: 6e:b4:37:5b:a3:ae:d3:f6:9c:e5:c0:55:79:14:a4: 32:46:d1:e4:43:38:8e:95:a2:f8:36:6b:83:45:48: 12:b9:e6:03:fa:ed:c0:5f:c4:16:c7:fb:45:29:9c: f8:29:3c:ea:a9:fa:2f:6b:fa:63:31:a5:84:02:5e: 2c:51:02:a4:39:e9:d9:bf:8a:cc:e4:3b:4b:f6:70: 48:53:35:e9:be:f4:75:b7:c5:23:4c:35:73:7f:3d: 9f:f9:01:93:ab:27:ab:2d:ee:02:af:dd:10:ed:53: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:06:95:16:2A:C0:BC:B0:50:60:AA:E4:12:CA:A7:F7:A6:1B:DD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/2bc7ff07-9aaf-3e5e-80aa-2126a0dda467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl X509v3 Authority Key Identifier: keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer sbgp-ipAddrBlock: critical IPv6: 2607:bd80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1c:e0:48:a2:e5:cd:21:c6:5c:ea:d5:76:23:ef:c5:8f:00: f9:05:64:40:3a:cf:dd:06:33:e2:55:c9:07:f4:24:9f:9c:11: 88:52:50:38:cb:42:d0:e2:eb:c6:32:da:bf:bf:0a:f5:c0:4a: da:31:ec:bf:5a:0b:5a:e3:5a:5b:2a:e6:92:e0:bc:20:32:37: 2d:b3:ca:72:43:09:9f:f5:54:49:dd:4f:e2:5e:8d:8e:b4:24: e3:c1:4a:c5:ae:be:98:4c:04:0b:c9:4a:d5:cd:43:16:53:5b: c3:9f:be:99:86:7d:6a:0e:0a:e2:82:c1:15:d2:8b:8d:8a:21: 92:6e:43:be:70:91:53:02:43:ef:3e:88:e1:a6:f4:fc:70:13: 5d:6e:2d:d3:fc:5d:6f:0d:25:dc:77:8e:64:f6:a9:e4:6d:12: 9c:ab:fb:16:f9:51:36:54:f6:27:6a:7d:0e:4f:87:74:1e:5d: 6b:54:26:71:9a:ba:ef:5e:81:77:87:bb:d2:27:b1:f0:fb:6e: 4e:b2:ee:7c:75:28:df:ed:f4:fd:5b:0f:e2:75:5b:ad:26:af: 66:23:04:0e:89:38:a1:1a:e7:65:bc:24:27:73:81:cf:29:ce: b6:37:96:20:0c:d5:34:70:df:79:4e:5d:dc:eb:fc:89:14:6a: bf:1e:ec:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEss9ty4Wvt8VFDmT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1 OGIwMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk M2ExYTFmNWEtOWU3YS00ODEwLTljMjMtM2UxMDMxYzk1MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXpsj6Q+NAk0ZG5P04iFSqiyhWV1ddWjcl6 /12gf9p30eHxpxbNULfCCeFOmYkLB65d4Zd4GG81rQMOrrsD51XJJ41QM4hOcLF+ kFQsojxSVGV4PaIAGnX06+SHLErWH/YICNWfWm4HFYklPmC0WYttHzWaPWbiuHuZ D38n0GRdWhDC5WRIV4O93N9an6RLFDigxrlutDdbo67T9pzlwFV5FKQyRtHkQziO laL4NmuDRUgSueYD+u3AX8QWx/tFKZz4KTzqqfova/pjMaWEAl4sUQKkOenZv4rM 5DtL9nBIUzXpvvR1t8UjTDVzfz2f+QGTqyerLe4Cr90Q7VNihwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDAGlRYqwLywUGCq5BLKp/emG90TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0 OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvMmJjN2ZmMDctOWFhZi0z ZTVlLTgwYWEtMjEyNmEwZGRhNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWYwNDk2YTgtMGNhOS00NWVjLTgy MGYtOGU4OGMzNmU1OGIwLzFmMDQ5NmE4LTBjYTktNDVlYy04MjBmLThlODhjMzZl NThiMC5jcmwwHwYDVR0jBBgwFoAUBdmyloInvfkN9+9ROqjQq8Wh1YwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4 YzM2ZTU4YjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge9gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeHOBIouXNIcZc6tV2I+/FjwD5BWRAOs/dBjPiVckH9CSfnBGIUlA4 y0LQ4uvGMtq/vwr1wEraMey/Wgta41pbKuaS4LwgMjcts8pyQwmf9VRJ3U/iXo2O tCTjwUrFrr6YTAQLyUrVzUMWU1vDn76Zhn1qDgrigsEV0ouNiiGSbkO+cJFTAkPv PojhpvT8cBNdbi3T/F1vDSXcd45k9qnkbRKcq/sW+VE2VPYnan0OT4d0Hl1rVCZx mrrvXoF3h7vSJ7Hw+25Osu58dSjf7fT9Ww/idVutJq9mIwQOiTihGudlvCQnc4HP Kc62N5YgDNU0cN95Tl3c6/yJFGq/Hux8 -----END CERTIFICATE-----Generated at Wed Sep 17 00:41:20 2025 by rpki-client